Every pull is verifiable.
The result of a box is fixed before you open it, provable with math, and checkable by you. No trust required, only arithmetic.
1 · random.org deals the cards
Every server seed comes from random.org's signed randomness service: true atmospheric noise, cryptographically signed. We publish two things before the seed serves a single pull: its SHA-256 hash and random.org's signature. The hash locks us in, and the signature proves we didn't generate a thousand seeds and keep a favorite. If random.org is ever unreachable, the seed is generated locally and clearly labeled house-generated; the commitment and your verification work identically.
2 · You add your own randomness
Your browser holds a client seed you can edit at any time. Because we never know it in advance, we cannot pick outcomes even if we wanted to.
3 · The pull is pure arithmetic
Each open combines the three values: SHA-256(serverSeed : clientSeed : nonce). The first 8 hex characters become a number, reduced to a roll from 0 to 100. The roll maps onto the box's published odds table: if Baccarat Rouge 540 occupies 99.4 to 100, a roll of 99.63 pulls it.
4 · Then we show our hand
When a server seed rotates, the retired seed is revealed on your account page, next to its random.org signature. Recompute the hash, recompute your rolls, confirm every pull you made. The verifier on this page runs the same math live. Seeds stay public forever.
5 · The giveaway has a referee
The weekly giveaway winner is drawn by random.org's signed draw service, and the signed certificate is linked from every winner announcement. Not our pick, not our server, provably.
The floor, in writing
Odds tables are printed on every box and sum to exactly 100%. Market values are checked against current retail and resale prices. Every reveal comes with an instant buyback offer, shown the moment your piece lands, and your balance is always yours to transfer back to your bank.